Glossary: Business Risk, Third Parties and Compliance

Rules of engagement

Also written: RoE

The written, signed rules for a security test: authorization, scope, timing, allowed methods, contacts, stop conditions, data handling and reporting. An example is Alex's rules for testing the staging shop with Ridgeline's sign-off.